Advisories · Technology
Red Hat Enterprise Linux 8.
Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 9.0 CriticalCritical · CVSS 9+
Samba: remote code execution in samr
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.0 High
Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Command injection
- CVSS 7.1 High
Samba: missing access check on reparse point operations
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 6.5 Medium
Samba: vfs_worm does not block directory modification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-280
- CVSS 8.0 High
Samba: group policy certificate enrollment uses http:// without validation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-345
- CVSS 5.3 Medium
Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-193
- CVSS 8.2 High
Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.1 High
Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 8.2 High
Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-126
- CVSS 7.8 High
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Samba: samba: remote code execution in printing subsystem via unescaped job description
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 6.5 Medium
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.7 E4S for RHEL 8
- Denial of service
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-475
- CVSS 8.0 High
Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.4 High
Gnutls: gnutls: security bypass due to incorrect name constraint handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 6.1 Medium
Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 6.1 Medium
Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.5 High
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-130
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls zero-length fragment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 3.7 Low
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-179
- CVSS 6.5 Medium
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-178
- CVSS 6.5 Medium
Libxml2: libxml2: denial of service via crafted xsd-validated document
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 3.7 Low
Libsoup: libsoup: http request smuggling via duplicate content-length headers
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- HTTP request smuggling
- CVSS 7.8 High
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 4.7 Medium
Webkitgtk: authorization bypass through webpage::send-request signal handler
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Broken access control
- CVSS 5.7 Medium
Libopensc: opensc: multiple uses of uninitialized variable
- OpenSC
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.5 Medium
Efivar: efivar: denial of service due to stack overflow in device path node parsing
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 6.1 Medium
Emacs: emacs: memory corruption vulnerability when processing svg css
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-193
- CVSS 7.8 High
Binutils: binutils: arbitrary code execution via malformed xcoff object file processing
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.5 Medium
Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Denial of service
- CVSS 5.5 Medium
Nano: nano: format string vulnerability leads to denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.0 Medium
Binutils: binutils: denial of service via crafted elf file
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 2.5 Low
Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Broken access control
- CVSS 7.5 High
Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.3 High
Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 6.1 Medium
Gimp: gimp: denial of service via specially crafted seattle filmworks file
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.5 Medium
Gimp: gimp: denial of service via crafted pvr image file
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.0 Medium
Gimp: gimp: application crashes or information disclosure via crafted icns image files
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.0 Medium
Gimp: gimp: denial of service due to stack buffer overflow in tim image loader
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.5 Medium
Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.5 Medium
Sssd: out-of-bounds read in the sssd
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.5 High
Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.7 Medium
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Race condition
- CVSS 7.8 High
Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- CWE-427
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 5.5 Medium
Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.0 Medium
Tar: tar: hidden file injection via crafted archives
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Unrestricted file upload
- CVSS 5.6 Medium
Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 3.7 Low
Util-linux: util-linux: access control bypass due to improper hostname canonicalization
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- CWE-289
- CVSS 3.3 Low
Libinput: libinput: information disclosure via dangling pointer in lua plugin handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 8.8 High
Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Code injection
- CVSS 7.5 High
Corosync: corosync: denial of service via integer overflow in join message validation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.2 High
Corosync: corosync: denial of service and information disclosure via crafted udp packet
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-253
- CVSS 7.5 High
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption